{"action":"Upgrade ssddanbrown/bookstack to 21.11 or later.","affected":[{"fixed":"21.11","introduced":"0"}],"component":"ssddanbrown/bookstack","cve_ids":["CVE-2021-3944"],"ecosystem":"Packagist","epss":0.00641,"exploited":false,"fixed_versions":["21.11"],"ghsa_id":"GHSA-wc7v-77jr-5c3m","id":"tcs_01M5KFA019M7N3DVBDTR387Q3H","modified_at":"2023-11-08T04:06:36.015874Z","published_at":"2021-12-03T20:38:37Z","references":["https://osv.dev/vulnerability/GHSA-wc7v-77jr-5c3m","https://nvd.nist.gov/vuln/detail/CVE-2021-3944","https://github.com/bookstackapp/bookstack/commit/88e6f93abf54192a69cc8080e0dc6516ee68ccbb","https://github.com/bookstackapp/bookstack","https://huntr.dev/bounties/65551490-5ade-49aa-8b8d-274c2ca9fdc9"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-wc7v-77jr-5c3m","url":"https://osv.dev/vulnerability/GHSA-wc7v-77jr-5c3m"}],"summary":"bookstack is vulnerable to Cross-Site Request Forgery (CSRF)"}